Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
File:                     st6zdl9Tnx7D8AIT_4NAhbfIx28.mft (raw, json)
Hash identifier:          6YupQLfGyM6YICytoPYqwOYyUZro+dSWGVUyCF/wyec=
Subject key identifier:   67:53:5A:BA:A0:07:9D:19:30:55:3A:08:7E:92:5A:6D:F9:91:8E:71
Authority key identifier: B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F
Certificate issuer:       /CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f
Certificate serial:       01901E8FADD90CA0EF37FDAFC82EB33E213B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
Manifest number:          0129
Signing time:             Sun 16 Jun 2024 01:00:50 +0000
Manifest this update:     Sun 16 Jun 2024 01:00:50 +0000
Manifest next update:     Mon 17 Jun 2024 01:00:50 +0000
Files and hashes:         1: RJw_F-p_qU2FrPRpcV3PQ0rH5nM.roa (hash: AQjiZb2C7Rg4ggtKYtZJ1MXbSkPw0EA+bOXdZ11WvoA=)
                          2: seo2SoJGqUg7uffg5dNtcTC6nNE.roa (hash: R4wrUK5U18ORWGKNovYbHczl34agjBzBRGjLfpGxWdA=)
                          3: st6zdl9Tnx7D8AIT_4NAhbfIx28.crl (hash: fxqYVnw7Lcx9OxuHx9Z020t/FMC6P7ATkmLyzxnCURM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:8f:ad:d9:0c:a0:ef:37:fd:af:c8:2e:b3:3e:21:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2deb3765f539f1ec3f00213ff834085b7c8c76f
        Validity
            Not Before: Jun 16 01:00:50 2024 GMT
            Not After : Jun 17 01:00:50 2024 GMT
        Subject: CN=67535abaa0079d1930553a087e925a6df9918e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1f:9e:a8:d9:dd:4f:c5:a5:ce:ad:ec:b2:e3:
                    c9:3f:9b:03:bb:b6:26:44:55:3a:02:7f:3c:65:39:
                    f3:92:af:4d:75:20:c9:c8:be:42:42:2c:44:6e:3f:
                    1d:15:27:ee:79:f4:8d:1c:6e:96:49:72:65:70:45:
                    5d:79:dc:b6:c6:d8:d6:59:fc:cb:aa:d4:62:d5:29:
                    f4:63:ed:1b:73:c1:f3:b6:02:fb:d6:83:c0:f8:4f:
                    e9:d5:35:d6:f0:1f:cd:0f:b9:18:73:9b:e6:b0:7b:
                    c1:e4:22:c4:5a:6e:e2:23:5b:dd:57:93:bb:f7:36:
                    c8:49:15:bc:dc:29:75:aa:6d:6a:92:9d:ef:90:03:
                    36:38:b4:86:2d:47:e1:d5:34:da:2b:e1:c1:0e:e7:
                    b2:db:c8:30:f9:73:d1:dc:14:6c:32:36:f8:f2:87:
                    d1:33:1f:81:69:17:5a:aa:ba:cf:1b:4d:4e:c6:00:
                    76:c9:30:9e:de:ff:26:51:cf:d6:c9:d1:9b:ea:c6:
                    a8:31:b4:dd:53:3f:2b:c6:cd:a2:2c:f7:da:43:43:
                    4a:4b:94:2a:97:aa:cf:bc:37:ac:9a:a4:13:de:6a:
                    c5:0e:63:fd:4a:27:51:72:aa:6e:ef:2a:a9:ed:69:
                    5d:d4:0d:c2:0e:14:46:72:9f:71:b0:24:52:5d:8a:
                    56:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:53:5A:BA:A0:07:9D:19:30:55:3A:08:7E:92:5A:6D:F9:91:8E:71
            X509v3 Authority Key Identifier:
                keyid:B2:DE:B3:76:5F:53:9F:1E:C3:F0:02:13:FF:83:40:85:B7:C8:C7:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st6zdl9Tnx7D8AIT_4NAhbfIx28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/8c6395-646a-47a2-b4b6-c6f6e3f28956/1/st6zdl9Tnx7D8AIT_4NAhbfIx28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:ca:7c:a3:7e:52:6a:8d:63:78:44:14:63:60:a7:88:b8:b9:
         62:f3:64:a0:ab:3b:4b:e1:c3:86:42:c0:ac:a1:08:3f:64:ee:
         bb:bb:71:1b:f6:2c:28:25:dc:c8:54:c0:a8:e9:97:17:ca:c0:
         03:e4:39:9f:9d:a8:b8:30:1d:15:5b:b5:8e:9a:4e:02:89:34:
         79:43:29:a4:b3:30:a2:7f:7c:c4:bd:f4:9c:f2:44:ad:1e:76:
         26:4f:d6:69:ad:1e:06:a1:ce:1f:c2:d7:0b:a6:7a:f4:cc:82:
         2b:6d:d6:a3:b9:e2:ff:3c:59:7f:0d:c3:a4:8a:92:4e:b8:5a:
         f2:c2:01:c8:b8:ac:5d:7c:a3:83:26:2d:14:b3:ac:31:0e:73:
         01:41:c9:9c:c3:76:4b:1a:7d:71:4b:3d:f9:bd:e9:e4:25:ba:
         99:60:2c:bc:d8:b9:52:47:dc:5c:63:7f:03:f8:d1:e3:c0:87:
         77:f3:67:2c:dd:c2:7f:f8:86:9f:39:54:da:f6:cd:1d:f0:82:
         b7:fe:bf:cb:07:8a:cc:08:dc:d7:bd:ae:4d:a6:17:c4:6f:79:
         c3:fb:ec:5c:68:67:c7:79:6f:2f:eb:52:57:81:a1:0e:75:8e:
         e4:11:5c:be:78:12:a6:9d:13:2e:0d:a2:ca:ae:cb:68:47:6b:
         24:7b:12:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:42:09 2024 by rpki-client on console-fra.rpki-client.org